Date: Thu, 9 Apr 2009 13:29:06 -0500 From: "Gary Gatten" <Ggatten@waddell.com> To: "Chuck Swiger" <cswiger@mac.com> Cc: freebsd-questions@freebsd.org Subject: RE: make install krb5 conflict with heimdal Message-ID: <70C0964126D66F458E688618E1CD008A0793E95C@WADPEXV0.waddell.com> In-Reply-To: <B4D01F5C-A7B5-44B3-975C-F63C01DCD09F@mac.com> References: <49DCA9E0.6000109@zedat.fu-berlin.de> <49DD0A57.7020701@freebsd.org> <49DE28D8.1020508@mail.zedat.fu-berlin.de> <70C0964126D66F458E688618E1CD008A0793E957@WADPEXV0.waddell.com> <20090409134659.58922787@att.net> <70C0964126D66F458E688618E1CD008A0793E95A@WADPEXV0.waddell.com> <B4D01F5C-A7B5-44B3-975C-F63C01DCD09F@mac.com>
next in thread | previous in thread | raw e-mail | index | archive | help
This actually makes a little sense - thanks for the pointers!
G
BTW: Is top posting bad? I prefer top posts, but if the list doesn't
like it I'll change. I'll find the rules and read them!
-----Original Message-----
From: Chuck Swiger [mailto:cswiger@mac.com]=20
Sent: Thursday, April 09, 2009 1:26 PM
To: Gary Gatten
Cc: freebsd-questions@freebsd.org Questions -
Subject: Re: make install krb5 conflict with heimdal
On Apr 9, 2009, at 11:21 AM, Gary Gatten wrote:
> This is a new thread, so not sure what you mean? Maybe my other posts
> re. new package system? Unintentional hijack - just venting, sorry.
>
> I'm aware of the pkg_delete -f; but I don't want to break FreeRADIUS.
> This will process involves getting FreeRADIUS hooked into AD, and one
> method I'm looking into is the SAMBA / NTLM thing. SAMBA won't=20=20
> install
> unless krb5 is "happy".
>
> Do I need to force heimdal removal, install krb5, reinstall heimdal=20=20
> and
> HOPE it works and nothing breaks in the process?
Nope. FreeRADIUS' Makefile claims to support both Heimdal and=20=20
Kerberos5, but you have to choose one or the other via the options=20=20
("make config"):
> .ifdef(WITH_KERBEROS)
> .ifdef(WITH_HEIMDAL)
> LIB_DEPENDS+=3D krb5.23:${PORTSDIR}/security/heimdal
> CONFIGURE_ARGS+=3D--enable-heimdal-krb5
> .else
> LIB_DEPENDS+=3D krb5.3:${PORTSDIR}/security/krb5
> .endif
Likewise with Samba:
> .if defined(WITH_ADS)
> SAMBA_WANT_LDAP=3D yes
> SAMBA_WANT_KRB5=3D yes
> CONFIGURE_ARGS+=3D --with-ads
> .else
> CONFIGURE_ARGS+=3D --without-ads
> .endif
> # Kerberos5 is necessary for ADS
> .if defined(SAMBA_WANT_KRB5)
> .if defined(KRB5_HOME) && exists(${KRB5_HOME}/lib/libgssapi_krb5.so)
> CONFIGURE_ARGS+=3D --with-krb5=3D"${KRB5_HOME}"
> .elif defined(HEIMDAL_HOME) && exists(${HEIMDAL_HOME}/lib/=20
> libgssapi.so)
> CONFIGURE_ARGS+=3D --with-krb5=3D"${HEIMDAL_HOME}"
> .elif exists(/usr/lib/libkrb5.so) && exists(/usr/bin/krb5-config)
> CONFIGURE_ARGS+=3D --with-krb5=3D"/usr"
> .else
> LIB_DEPENDS+=3D krb5:${PORTSDIR}/security/heimdal
> CONFIGURE_ARGS+=3D --with-krb5=3D"${LOCALBASE}"
> .endif
Regards,
--=20
-Chuck
<font size=3D"1">
<div style=3D'border:none;border-bottom:double windowtext 2.25pt;padding:0i=
n 0in 1.0pt 0in'>
</div>
"This email is intended to be reviewed by only the intended recipient
and may contain information that is privileged and/or confidential.
If you are not the intended recipient, you are hereby notified that
any review, use, dissemination, disclosure or copying of this email
and its attachments, if any, is strictly prohibited. If you have
received this email in error, please immediately notify the sender by
return email and delete this email from your system."
</font>
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?70C0964126D66F458E688618E1CD008A0793E95C>